01 /
Who the data controller is
For any question about your data, or to exercise your rights, write to [to be completed]. The owner's full details are in the legal notice.
02 /
What data I process, why and on what legal basis
As of October 17, 2026, this site processes personal data in three situations. There are no others:
Server logs would only be kept longer if a specific security incident had to be investigated or a legal request had to be met. I don't use them to find out who you are or combine them with other data, and the affiliate reports are only used to reconcile commissions.
Analytics: switched off
This site uses no analytics tool. Google Analytics is switched off and its code isn't loaded on any page, so browsing here sends nothing to Google. If I ever turn it on, it will only run with your consent: I'll first update this policy with details of what data it collects, who receives it and how long it's kept, and you'll see a notice with “Accept” and “Reject” on the same level.
03 /
YouTube videos and the channel counter
Videos are shown in YouTube's privacy-enhanced mode (the youtube-nocookie.com domain) and the player only loads when you press play. Before that you see a static thumbnail served from my own server, so nothing from YouTube is loaded.
When you press play, your browser connects to YouTube, which processes your data as an independent controller under Google's privacy policy and may use cookies or local storage. According to Google, in this mode the view isn't used to personalize your YouTube experience or the ads you see outside this site.
The subscriber, view and video counter at the top is generated by my server from the channel's public statistics. While the page is in view, your browser downloads a small file from my own domain (/live/stats.json) once a minute. It sets no cookies and collects no personal data; that download shows up in the server logs like any other visit.
Fonts, video thumbnails and images are hosted on my server, so loading the site doesn't trigger requests to Google Fonts, YouTube or stock-photo sites.
04 /
Affiliate links: clicking takes you off this site
The links to OKX, Ledger and Trezor are labeled “Advertising”. Clicking them doesn't make this site set anything on your device: it simply takes you to that company's website. There, the company may use cookies or an identifier included in the link itself to know you came from my site and credit me with the commission, and it processes your data as an independent controller under its own privacy and cookie policy.
If you sign up with an exchange or buy a wallet, the relationship (identity checks, payments, shipping, trades) is between you and that company. This site doesn't receive your sign-up or payment details. Before handing over yours, read the company's privacy policy on its own website.
05 /
Who else may see your data
- Hosting provider: stores the site and the server logs on my behalf, as a data processor (Art. 28 GDPR).
- Email provider I use to manage [to be completed], also as a data processor.
- YouTube (Google Ireland Limited): only if you press play, as an independent controller.
- OKX, Ledger and Trezor: only if you click one of their links and use their website, as independent controllers.
- Authorities, courts and law enforcement, only when the law requires me to.
I don't sell or pass your data to anyone else and I don't use it for advertising. Nor do I make automated decisions or build profiles that affect you.
06 /
Transfers outside the European Economic Area
This site, on its own, doesn't send your data outside the European Economic Area. If you press play, YouTube may process it in the United States. According to Google, Google LLC has certified its adherence to the EU-U.S. Data Privacy Framework, which is covered by a European Commission adequacy decision of July 10, 2023 (Art. 45 GDPR), and where a transfer isn't covered it uses standard contractual clauses, as explained on its page about data transfer frameworks.
If any of my providers ever processed data outside the EEA, it would do so under one of the safeguards in Chapter V of the GDPR, and I'd say so here. Any transfers made by OKX, Ledger or Trezor are governed by their own policies.
07 /
Your rights and how to exercise them
- Access: find out whether I process data about you and get a copy.
- Rectification of inaccurate data.
- Erasure, when the data is no longer needed.
- Objection to processing based on legitimate interest.
- Restriction of processing, for example while a complaint of yours is being checked.
- Portability of the data you gave me yourself.
- Withdrawing consent at any time, if I ever ask for it. Today I process no data on that basis.
Write to [to be completed] saying which right you want to exercise. It's free and I'll reply within one month, extendable by two more if the request is complex (Art. 12(3) GDPR). I'll only ask for more information if I have reasonable doubts about your identity.
A practical point: since there are no accounts, I can't link the server logs to your name. If you want me to find yours, tell me your IP address and the approximate date and time of your visit, and bear in mind they're deleted within a few days. If I can't identify you, I'll explain why (Art. 11 GDPR).
08 /
If you're not satisfied: the AEPD
If you think I haven't handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) through its online office. Its website has a guide to exercising your rights, in Spanish. If you live in another EU country, you can also contact your own data protection authority. I'd appreciate it if you wrote to me first: almost everything can be fixed with an email.
09 /
Minors
The content is aimed at adults, because it deals with risky investments. Under Article 7 of Spain's LOPDGDD, in Spain you can only consent to the processing of your data yourself from the age of 14. Today this site doesn't ask you for any consent; if it ever does and you're under 14, ask your mother, father or guardian to decide for you.
10 /
Changes to this policy
If what the site does with your data changes, for example because I turn on an analytics tool or add a form, I'll update this page before applying it and, if your consent is needed, I'll ask for it. The date of the last update appears at the top.